<?php
session_start();
if (!$_SESSION['user']){//判断用户是否已经登录
    header('Location: login.php');
    return;
}
?>
<!doctype html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport"
          content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <title>查询通讯录信息</title>
    <style>
        h1{color: red;}
        a{color: gray;text-decoration: none;}
        a:hover{color: red;}
        .status{ text-align: right;
            width: 480px; margin: 6px 0; display: flex;}
        .status>p:nth-child(2){
            color: red;
            flex-grow: 1;
            text-align: left;
        }
        table{
            width: 480px;
            border: 4px double red;
            border-spacing: 0;
        }
        th,td{border-bottom: 1px solid red;
            border-right: 1px dotted red;
            padding: 6px 10px;}
        p{margin: 0;}
    </style>
</head>
<body>
<h1>查询通讯录信息</h1>
<div class="status">
    <p>欢迎你 :</p>
    <p><?= $_SESSION['user']['xh'].$_SESSION['user']['name']?></p>
    <a href="logout.php">注销</a>
</div>
<?php
$db=new PDO("mysql:host=localhost; dbname=db5", 'root', '12qwas');
$db->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE,PDO::FETCH_ASSOC);
$ps=$db->query('select * from students');
echo "<table>";
echo '<tr><th>学号</th><th>姓名</th><th>电话</th><th>管理</th></tr>';
foreach ($ps as $r){
    echo "<tr><td>{$r['xh']}</td><td>{$r['name']}</td><td>{$r['tel']}</td><td>";
    if ($r['xh']===$_SESSION['user']['xh'] || $_SESSION['user']['isAdmin'] ){
        echo "<a href='delete.php?xh=",urlencode($r['xh']),"'>删除</a> <a href='modify.php?xh=",urlencode($r['xh']),"'>修改</a>";
    }
    echo "</td></tr>";
}
?>
</body>
</html>
